Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
File:                     C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json)
Hash identifier:          Qv5ICPU1p9sB9qscKetJmLAMYpRBJDfP6ieJI3ZYU94=
Subject key identifier:   15:45:D9:F0:81:C3:6A:2A:40:D8:FB:02:A5:13:6D:D4:FB:BD:75:5F
Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
Certificate issuer:       /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Certificate serial:       3D875D3E8BF9E554A51433B0AA93D23FD376CD1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
Manifest number:          B2
Signing time:             Wed 11 Jun 2025 13:51:52 +0000
Manifest this update:     Wed 11 Jun 2025 13:46:52 +0000
Manifest next update:     Sat 14 Jun 2025 18:13:52 +0000
Files and hashes:         1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=)
                          2: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: hcAnoYBGjUFsbFC56ZBYrBC2p3BaWTciYHPs9oGybTQ=)
                          3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
                          rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 18:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:5d:3e:8b:f9:e5:54:a5:14:33:b0:aa:93:d2:3f:d3:76:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
        Validity
            Not Before: Jun 11 13:46:52 2025 GMT
            Not After : Jun 14 18:13:52 2025 GMT
        Subject: CN=1545D9F081C36A2A40D8FB02A5136DD4FBBD755F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:7f:b1:2b:fa:0b:b7:d8:e4:3b:ae:ca:2f:
                    6b:b9:5f:b6:de:cf:7c:d4:13:4c:d2:ea:4d:60:11:
                    ed:3d:72:94:c6:ec:09:06:27:e3:13:43:5e:6b:ac:
                    7f:e2:de:3c:1a:fd:df:71:df:b7:8e:1d:78:b2:88:
                    74:59:af:55:52:16:1b:b9:76:c9:d9:68:c1:d5:e8:
                    17:9f:a7:62:54:02:1c:be:d0:fb:33:c1:2a:3e:1b:
                    05:9f:40:39:78:e1:f2:60:b4:60:87:80:00:e4:ff:
                    fa:e3:ab:63:51:ce:71:72:ba:fd:be:d6:8a:7b:9a:
                    33:a5:59:60:3d:1c:f2:6c:05:c2:15:51:ce:be:e1:
                    81:38:19:9e:f5:43:ca:a9:6d:ae:b1:95:d9:e2:ea:
                    49:0d:31:90:85:82:5d:42:50:ef:1e:d3:8d:06:18:
                    f9:86:5f:2b:16:56:40:42:f8:49:fd:e3:52:85:53:
                    bb:e9:56:f1:d1:f0:80:6a:2c:65:f9:03:53:d2:14:
                    fe:c1:e9:9d:2b:41:41:33:b4:2c:27:30:9c:be:ad:
                    f6:90:17:a5:a0:57:8b:7d:d9:b1:74:3e:e8:47:7f:
                    31:9a:ec:7d:63:f6:34:6b:84:e1:ed:b7:81:35:95:
                    0e:14:0f:53:ac:2d:5c:a9:d1:ce:23:94:71:d5:92:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:D9:F0:81:C3:6A:2A:40:D8:FB:02:A5:13:6D:D4:FB:BD:75:5F
            X509v3 Authority Key Identifier:
                keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:f7:96:dc:35:53:4a:18:e1:88:be:fa:96:6e:7f:92:47:
         3e:92:67:12:0a:89:04:e9:ab:5f:82:88:87:bc:67:d6:7a:09:
         47:ba:42:62:47:86:0e:21:ab:d1:fa:19:94:d4:a2:ae:2c:ff:
         30:86:94:42:b0:ec:53:de:5f:e2:46:85:7a:a6:a4:9d:5a:7f:
         59:93:4a:ea:9d:1e:8d:66:ef:96:58:ce:aa:2b:ab:fb:11:0e:
         f1:df:36:8e:43:60:22:92:7f:66:de:aa:3c:b9:4c:60:d0:ca:
         f2:ea:94:74:0c:0b:99:1d:3e:43:60:12:d6:49:2e:45:a7:81:
         6e:3d:33:a4:af:c7:0a:42:91:7e:d2:49:cf:c8:40:7c:44:21:
         48:9d:ae:4e:84:29:9a:73:9b:10:43:ce:e8:f2:8e:b8:bd:ab:
         49:c5:64:46:9c:d4:d4:4a:32:96:b9:de:24:ac:b0:8b:9a:8e:
         f2:1b:bc:fc:1f:ec:a5:c3:57:cc:e5:6d:ec:04:c9:5d:cf:fa:
         da:f2:2d:a6:8e:7c:eb:ec:5e:2a:25:11:99:91:0c:ab:6e:36:
         9c:e2:ee:5e:88:d6:14:60:1f:52:cc:c8:05:2d:f2:34:19:92:
         96:ab:de:91:9a:e4:ce:9d:a4:40:2b:a7:15:62:ae:5f:b7:c2:
         97:d0:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:38:52 2025 by rpki-client